Editing Portal:Crypto and Blockchain (section)

=== Security, scams, and operational risk ===

Cryptocurrency development is security-sensitive. A Perl script that mishandles a password, private key, seed phrase, exchange API key, RPC cookie, or wallet file can cause irreversible damage. Cryptocurrency also attracts scams, phishing, fake wallets, malicious packages, fraudulent tokens, and compromised infrastructure.

Good Perl cryptocurrency practice includes:

* never hard-coding private keys or seed phrases;
* keeping signing operations offline when possible;
* using read-only API keys for monitoring;
* restricting RPC access to trusted hosts;
* using file permissions carefully;
* logging enough for audits but not logging secrets;
* testing on regtest, testnet, signet, or small values before mainnet use;
* pinning dependencies where appropriate;
* reviewing CPAN module maintenance status;
* treating exchange and wallet APIs as high-risk interfaces.

Perl’s power is that a short script can do a lot. In cryptocurrency, that power must be matched with discipline.